NHTSA opened an audit of Tesla's Cybercab self-certification just hours after Tesla launched its robotaxi service in Austin, Texas. The timing signals heightened federal scrutiny of Tesla's exemption-based approach to deploying vehicles without traditional steering controls. It raises regulatory risk for Tesla's robotaxi rollout timeline.
A US congressman demanded answers after reports that Tesla vehicles detected a drowsy driver and then suggested activating Full Self-Driving. The incident raises questions about whether Tesla's driver-monitoring system adequately prevents misuse of its ADAS features. It adds to mounting federal scrutiny of Tesla's autonomy safety claims.
The EU Cyber Resilience Act has entered its mandatory reporting phase, requiring manufacturers of products with digital elements to disclose actively exploited vulnerabilities and severe security incidents through ENISA's new Single Reporting Platform. Under Article 14, manufacturers must notify both the relevant CSIRT coordinator and ENISA without undue delay, with an initial 24-hour reporting window. This obligation directly affects connected vehicle and automotive IoT manufacturers selling into the EU market. Non-compliance exposes automakers and suppliers to regulatory penalties, making vulnerability monitoring and incident response capabilities an operational requirement rather than a voluntary practice.
Minneapolis officials proposed requiring a human safety driver inside driverless cars operating in the city. The measure would impose local restrictions that could conflict with state-level AV frameworks. It reflects growing municipal pushback against fully driverless deployment in US cities.
Pony.ai and Verne launched driverless robotaxi testing in Zagreb, Croatia, marking one of the first such deployments in Europe. The partnership brings Chinese autonomous driving technology into an EU market with distinct regulatory and road conditions. It signals European cities are becoming testbeds for non-European robotaxi operators.
Global Automotive Cyber Incidents/Eventsinformational
Silicon Motion, a fabless semiconductor supplier of NAND flash controllers, achieved automotive cybersecurity certification for its products. The certification addresses ISO/SAE 21434 or equivalent automotive security standards relevant to connected and autonomous vehicle electronics. This matters because storage controllers handling sensor and map data in autonomous platforms must meet automotive-grade security requirements to win OEM design wins.
Maple Leaf launched Oman's first autonomous driving demonstration and signed a cooperation agreement with the country's Ministry of Transport, Communications and Information Technology. The Chinese company showcased its autonomous shuttle at Salalah International Airport with Omani officials present. The deal marks an expansion of Chinese autonomous driving technology into the Middle East market.
The Alliance for Automotive Innovation, representing GM, Ford, Toyota, Volkswagen, Hyundai, Honda, and Stellantis, urged Congress to pass the Connected Vehicle Security Act of 2026, permanently banning Chinese-made connected vehicles, software, and hardware from the US market. The lobby push escalates a bipartisan campaign to block Chinese brands before Congress adjourns. The proposed ban would reshape supply chains for connected and autonomous vehicle software and hardware across the US auto industry.
Tesla's Full Self-Driving system reportedly gained a new safety capability that allows it to take control of the vehicle to avoid a crash. The feature reflects Tesla's continued push toward higher levels of automated driving intervention. The development signals ongoing competition among automakers to advance collision-avoidance autonomy features.
Minneapolis officials are considering an ordinance requiring a human operator in every self-driving car to protect jobs. The proposed rule targets autonomous vehicle deployment in the city and reflects labor-driven resistance to driverless operations. It could set a precedent for municipal restrictions on robotaxi and autonomous trucking services.
Tesla Autopilot was active during a fatal crash on Interstate 35 that killed the driver, according to a report. The incident adds to scrutiny of Tesla's driver-assist system and its role in crashes. It reinforces regulatory and legal pressure on Tesla over Autopilot safety and driver monitoring.
Spain granted its first Level 4 autonomous vehicle permit to WeRide and Uber, allowing driverless operations in the country. The approval marks a significant regulatory milestone for both companies as they expand robotaxi services into Europe. It signals growing European openness to commercial L4 deployment beyond limited pilot programs.
Maple Leaf launched Oman's first autonomous driving demonstration, introducing Chinese AV technology to the Middle Eastern market. The showcase aims to build local regulatory and public support for future deployments. It reflects the broader trend of Chinese autonomous driving firms exporting technology to Gulf markets.
US Rep. Raja Krishnamoorthi demanded the Department of Transportation explain its oversight of Tesla Autopilot and Full Self-Driving after NBC News surfaced 43 videos of drivers apparently asleep. The congressman gave Transportation Secretary Sean Duffy until September 30 to answer five questions. The pressure intensifies federal scrutiny of Tesla's driver-monitoring failures.
Affected Vehicle Make & Model
Tesla, Robotaxi
Global Automotive Cyber Incidents/Eventsinformational
Japan has seen an extreme surge in ransomware cases, with manufacturing accounting for the largest share of victims in 2026, followed by automotive-related businesses. The country's highly connected business environment, spanning manufacturers, automotive companies, logistics providers, and suppliers, enables attackers to pivot from one compromised company to disrupt partners and suppliers. The interconnected nature of Japanese automotive supply chains amplifies the blast radius of each incident. The trend signals an ongoing threat requiring supply chain segmentation and third-party risk monitoring across the sector.
Tesla released a Full Self-Driving update that allows the system to override driver steering input to avoid a crash. The feature marks a shift toward greater vehicle authority over human control in Tesla's driver-assist stack. It raises regulatory and liability questions as Tesla's systems remain classified as requiring active driver supervision.
A software glitch disabled a Tesla Cybercab robotaxi during a MotorTrend test ride, forcing the vehicle to stop mid-journey. The incident underscores reliability challenges facing Tesla as it prepares to scale its purpose-built autonomous taxi. It raises questions about software robustness ahead of planned commercial Cybercab launches.
Neolix, a leading autonomous delivery fleet operator, began its first Level 4 testing in Tokyo, Japan. The trials mark a significant step for autonomous delivery vehicles in a major Japanese metropolitan market. Success could accelerate regulatory approval and commercial rollout of driverless logistics across Japan.
Pony.ai began driverless robotaxi testing in Zagreb, Croatia, expanding its European footprint beyond prior markets. The tests mark one of the first driverless operations in the Balkans region. The move reflects Chinese AV firms pushing into European cities to validate technology and build regulatory relationships.
Global Automotive Cyber Incidents/Eventsmedium
πΈοΈ Ransomware Detected: HARLEY-DAVIDSON.COM targeted by clop
HARLEY-DAVIDSON.COM is targeted by clop.Victim Description: [AI generated] Harley-Davidson is an American iconic motorcycle manufacturer headquartered in Milwaukee, Wisconsin, USA. Founded in 1903, the company designs, manufactures, and sells heavyweight motorcycles, related parts, accessories, and branded merchandise. It operates globally across the powersports and automotive industry. Its website serves as a digital hub for product information, dealer locators, community engagement, and e-commerce for enthusiasts worldwide.Victimβs Country: USDiscovered: 10 Sep 2026, 18:22 SGT
Known TTPs associated with CL0P
T1059.001 PowerShellT1059.003 Windows Command ShellT1190 Exploit Public-Facing ApplicationT1505.003 Web ShellT1566 Phishing
Actor-profile intelligence; not confirmed in this individual incident, but included in heatmap count.
Pony.ai reported phased progress in its commercial robotaxi operations in Doha, Qatar, advancing its Middle East deployment strategy. The milestone follows prior testing and signals a transition toward revenue-generating autonomous ride services. It reinforces the Gulf region as an early adopter market for Chinese robotaxi technology.
A disability activist claims Waymo's Nevada robotaxi rollout violates accessibility law, arguing the service fails to accommodate riders with disabilities. The complaint targets Waymo's deployment in Nevada and could trigger regulatory scrutiny. It signals growing legal pressure on robotaxi operators to meet ADA-style accessibility requirements before scaling.
Lyft has expanded its partnership with Waymo to include Nashville, Tennessee, where Lyft riders can now be matched with Waymo robotaxis. The integration allows Lyft to offer autonomous rides in a new city without owning the technology. This move strengthens Lyft's position as a key fleet partner for Waymo as the robotaxi service expands beyond its initial markets.
Tesla is rolling out a new Full Self-Driving (FSD) software version that includes a major safety enhancement. The update is being distributed to Tesla vehicles with the FSD package. This release aims to improve the safety and reliability of Tesla's autonomous driving system.
Tesla has deployed 45 Cybercabs in Austin, marking the first public operation of its dedicated robotaxi vehicle. The fleet's presence provides real-world data on autonomous ride-hailing performance and economics. This deployment is a key test for Tesla's robotaxi business model that Wall Street has been anticipating.